Autonomous System Provider Authorization

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/AS215110.asa
File:                     AS215110.asa (raw, json)
Hash identifier:          LrafDexqJEVFyUjGUqgsdclNBUwlnGAU0+Q7MrY76BY=
Subject key identifier:   D7:D7:85:39:23:4F:26:18:96:01:96:65:B3:FB:56:CC:AE:AC:20:D6
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       3C0D4A59089801D65C96B58EF62169D5207D0449
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/AS215110.asa
Signing time:             Wed 17 Jun 2026 18:23:50 +0000
ASPA not before:          Wed 17 Jun 2026 18:18:50 +0000
ASPA not after:           Wed 16 Jun 2027 18:23:50 +0000
Customer ASID:            215110
Providers:                AS: 11967
                          AS: 34927
                          AS: 197324
                          AS: 199746
                          AS: 201541
                          AS: 202358
                          AS: 204464
                          AS: 205941
                          AS: 207252
                          AS: 209533
                          AS: 212895
                          AS: 213449
                          AS: 214915
                          AS: 219418
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0d:4a:59:08:98:01:d6:5c:96:b5:8e:f6:21:69:d5:20:7d:04:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: Jun 17 18:18:50 2026 GMT
            Not After : Jun 16 18:23:50 2027 GMT
        Subject: CN=D7D78539234F261896019665B3FB56CCAEAC20D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:03:65:88:b6:31:61:71:4a:a7:ac:a2:00:
                    63:0c:fc:2c:7d:58:32:10:1e:25:62:a4:93:24:91:
                    2d:62:74:f7:58:88:1b:bb:75:70:fd:f4:ef:ff:02:
                    99:ce:79:4c:2f:d9:e2:84:db:9e:1a:be:4a:f8:df:
                    b0:d8:41:32:e3:d0:e6:60:24:a3:e9:10:89:51:dc:
                    9e:ab:ab:8e:b0:4d:27:08:6e:e5:39:5a:29:1c:0f:
                    d6:f0:2d:10:ca:cc:64:d2:1c:fa:a6:58:7b:1c:12:
                    c0:3e:19:3b:f4:62:e2:f1:4c:a3:32:3e:7f:d5:e1:
                    50:9e:53:dc:96:31:db:f2:09:7b:a9:ec:14:6f:69:
                    30:8b:8d:95:21:57:4e:80:a0:bf:ea:90:dc:05:41:
                    83:6c:28:fa:94:71:82:13:c5:b6:94:b0:7a:c7:0a:
                    73:4d:2d:1c:b0:0e:61:25:ec:00:5d:0a:61:de:b3:
                    79:09:e5:da:25:bb:ed:2e:08:e0:cf:8a:af:8a:90:
                    d2:07:bb:03:4a:eb:12:2b:b2:09:19:92:6a:ac:f3:
                    1b:54:1e:3f:60:41:3e:54:86:6d:4d:ed:c3:4d:bf:
                    29:64:e2:d8:30:36:4a:14:d4:a0:b6:43:e0:cd:c3:
                    e1:27:8e:de:9b:c4:fd:26:f9:d8:03:30:69:32:e2:
                    5c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D7:85:39:23:4F:26:18:96:01:96:65:B3:FB:56:CC:AE:AC:20:D6
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/AS215110.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215110

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:07:ee:e4:6c:83:85:81:6a:ca:1e:7b:42:60:5e:48:d4:
         ce:31:0d:46:28:3a:6d:f2:40:b2:86:85:8d:6b:9a:77:eb:7b:
         8b:ab:d5:0e:ab:52:f0:00:d5:59:52:be:1e:dd:a2:a1:f8:a0:
         d6:94:07:2e:d3:03:df:33:b2:f4:ca:84:6b:14:bc:54:3b:17:
         49:f3:3e:e4:b1:ac:3a:98:40:2d:17:80:ef:b4:a1:c0:82:8d:
         67:29:f6:a4:5e:e0:fc:26:3e:90:0c:98:9a:14:cb:cb:19:f9:
         23:b9:75:d5:24:70:ed:47:3e:81:ec:a5:89:44:b7:93:86:b7:
         f5:ae:b8:dc:9b:6a:10:a1:34:eb:5c:44:ea:b6:bd:d1:82:44:
         d2:db:30:9c:69:9d:2b:2c:4b:d0:d3:68:ce:92:87:32:cb:bf:
         60:42:21:fd:9e:7f:64:82:41:c6:58:5c:91:66:0f:84:40:16:
         9e:31:3b:6a:4d:b9:3f:0e:87:36:d5:bb:15:7e:c5:69:7f:ce:
         0e:c4:62:a0:41:ab:ec:e7:11:81:92:5e:28:18:72:91:0c:e2:
         81:3c:30:7b:e2:e7:14:53:df:3f:0c:f4:6f:0f:1f:1d:71:77:
         11:57:c0:7d:43:ab:3a:1c:1e:de:1a:7c:0e:66:32:51:37:71:
         af:5d:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 07:21:26 2026 by rpki-client